Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/eOJpQF5FNoppqB79NhjuknNPvas.roa
File: eOJpQF5FNoppqB79NhjuknNPvas.roa (raw, json)
Hash identifier: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=
Subject key identifier: 78:E2:69:40:5E:45:36:8A:69:A8:1E:FD:36:18:EE:92:73:4F:BD:AB
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 0194244488C7D9C7432AB6CB577BBBC765B7
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/eOJpQF5FNoppqB79NhjuknNPvas.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35108
IP address blocks: 194.8.32.0/21 maxlen: 24
194.8.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:88:c7:d9:c7:43:2a:b6:cb:57:7b:bb:c7:65:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e269405e45368a69a81efd3618ee92734fbdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:a1:e9:6b:91:38:bc:c0:a9:22:68:c3:7e:
8f:50:65:b0:dc:51:9a:72:0c:23:a1:51:0a:dd:73:
71:9e:50:2e:cb:a9:5a:46:ab:3a:52:83:d0:c3:25:
11:ce:8a:6b:67:e1:db:72:da:08:38:e7:ba:fa:46:
09:0e:5d:6e:51:2e:20:59:f7:b9:66:2e:21:fb:e0:
9c:53:2b:6a:c7:61:07:d9:03:cf:1d:a7:32:66:bf:
41:f9:61:28:4c:93:58:25:bc:30:78:42:8b:56:91:
de:30:8a:ee:ad:8e:89:b7:83:37:23:dd:14:cb:4c:
2f:a9:56:2d:35:3c:fa:70:8b:25:82:e2:ce:42:ed:
8a:0c:68:f6:2c:6b:0c:7f:f1:66:72:eb:42:39:0f:
2b:78:60:ca:5a:eb:13:c0:3a:4e:d4:e5:c5:56:9a:
f4:3c:91:14:a7:6e:85:bc:e2:e8:db:04:63:9e:f9:
52:e8:f3:12:39:48:08:08:95:76:ff:9f:25:84:a6:
24:a8:da:08:d3:d4:36:91:06:45:47:31:56:12:38:
1f:0c:52:a7:81:8e:06:7c:96:22:08:f8:23:fb:91:
74:39:23:32:db:01:1f:df:92:79:ae:3f:d7:0c:89:
7c:46:7c:00:6d:89:b9:a3:0a:94:c3:01:2a:f6:64:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:69:40:5E:45:36:8A:69:A8:1E:FD:36:18:EE:92:73:4F:BD:AB
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/eOJpQF5FNoppqB79NhjuknNPvas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.32.0-194.8.43.255
Signature Algorithm: sha256WithRSAEncryption
10:17:48:94:ad:fa:f3:53:1a:30:95:ed:f3:fb:64:a9:87:6f:
da:ab:e0:be:a1:a2:1b:f9:8b:30:65:19:cc:79:ac:5a:ad:55:
b1:59:31:0f:a1:f2:1d:62:07:18:93:64:10:e4:1e:a5:68:1c:
b3:3e:e5:cf:6e:7f:39:5f:ec:df:b9:96:57:45:b5:1d:98:95:
11:ed:a9:6a:1c:be:c8:4b:65:23:fa:77:e3:dd:8c:0b:f0:bd:
4c:c9:31:d5:09:7a:24:a5:60:9c:9e:e2:d3:19:e0:00:c5:2e:
87:37:2d:6a:82:29:b5:86:e9:46:9b:bc:8c:e5:7d:75:d3:ab:
db:11:b2:e3:1d:a4:9d:51:1f:c8:3c:af:0b:8b:84:8f:c0:4e:
25:80:de:5a:7e:58:4e:9b:a9:96:95:eb:6f:57:d1:c4:82:35:
c5:99:77:9e:5a:6f:9f:f9:6f:4b:b3:55:66:b1:1b:5f:0b:f7:
ac:15:37:d3:79:da:6a:77:3f:2f:bb:1a:82:fa:6a:14:da:c3:
13:a9:b8:2f:64:2b:b4:fd:a7:41:99:38:83:ea:55:8d:5b:28:
52:9b:6e:19:50:16:28:e7:bb:18:f9:1e:e8:71:c4:c7:9f:1e:
c0:db:9c:07:85:8b:ba:2c:0f:97:c9:55:61:92:50:fa:7c:59:
08:9e:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:28 2025 by rpki-client